Unfortunately there aren't a useable backtrace:
crash log for WebProcess (pid <unknown>):
STDOUT: <empty>
STDERR: <empty>
fast/text/text-transform-nontext-node-crash.xhtml passes if you run only
this test, but crashes if you run the whole fast/text directory.

I've done some digging, you can easily reproduce the bug with the following command:
run-tests-in-xvfb.sh -2 fast/text/text-stroke-width-cairo-dos.html fast/text/text-transform-nontext-node-crash.xhtml --force
It means that after r113678 fast/text/text-stroke-width-cairo-dos.html makes the next test crash.